testing-methodology
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes a capability to review external files through the
/testing-methodology <file>command. This creates an ingestion point for untrusted data that could theoretically contain malicious instructions. However, the skill does not possess capabilities to execute commands, perform network operations, or write to the filesystem, which mitigates the risk of this surface. - [SAFE]: The instructions focus entirely on established software engineering principles for testing, such as the AAA pattern and the test pyramid. No obfuscation, data exfiltration, or persistence mechanisms were detected in the content.
Audit Metadata